fix

Signed-off-by: Roman Nikitenko <rnikiten@redhat.com>

Author: RomanNikitenko

code/extensions/copilot/src/platform/authentication/vscode-node/copilotTokenManager.ts

@@ -21,9 +21,12 @@ import { getAnyAuthSession } from './session';
 //Flag if we've shown message about broken oauth token.
 let shown401Message = false;
 
-/** Workspace PATs cannot be exchanged for a Copilot token; device OAuth is required. */
-function isWorkspacePersonalAccessToken(token: string): boolean {
-	return token.startsWith('ghp_') || token.startsWith('github_pat_');
+const CHE_WORKSPACE_PAT_SCOPE = 'che:workspace-pat';
+
+/** Sessions hydrated from a workspace PAT carry the che:workspace-pat marker scope. */
+function isWorkspacePatSession(session: { accessToken: string; scopes: readonly string[] }): boolean {
+	return session.scopes?.includes(CHE_WORKSPACE_PAT_SCOPE) ||
+		session.accessToken.startsWith('ghp_') || session.accessToken.startsWith('github_pat_');
 }
 
 export class NotSignedUpError extends Error { }
@@ -83,8 +86,8 @@ export class VSCodeCopilotTokenManager extends BaseCopilotTokenManager {
 			return { kind: 'failure', reason: 'GitHubLoginFailed' };
 		}
 		if (session) {
-			if (isWorkspacePersonalAccessToken(session.accessToken)) {
-				this._logService.info('Copilot token exchange skipped (workspace PAT cannot be used for Copilot; device authentication is required)');
+			if (isWorkspacePatSession(session)) {
+				this._logService.info('Copilot token exchange skipped (workspace PAT session detected via scope marker; device authentication is required)');
 				this._telemetryService.sendGHTelemetryErrorEvent('auth.github_login_failed');
 				return { kind: 'failure', reason: 'GitHubLoginFailed' };
 			}
@@ -94,7 +97,7 @@ export class VSCodeCopilotTokenManager extends BaseCopilotTokenManager {
 			if (tokenResult.kind === 'success') {
 				this._logService.info(`Got Copilot token for ${session.account.label}`);
 				this._logService.info(`Copilot Chat: ${this._envService.getVersion()}, VS Code: ${this._envService.vscodeVersion}`);
-			} else if (tokenResult.kind === 'failure' && (tokenResult.reason === 'ParseFailed' || tokenResult.reason === 'RequestFailed')) {
+			} else if (tokenResult.kind === 'failure' && (tokenResult.reason === 'ParseFailed' || tokenResult.reason === 'RequestFailed' || tokenResult.reason === 'NotAuthorized')) {
 				this._logService.info('Copilot token exchange failed (workspace token cannot be exchanged for Copilot token), triggering sign-in flow');
 				return { kind: 'failure', reason: 'GitHubLoginFailed' };
 			}